diff options
| author | Matt Johnston <matt@ucc.asn.au> | 2013-05-26 18:42:17 +0800 |
|---|---|---|
| committer | Matt Johnston <matt@ucc.asn.au> | 2013-05-26 18:42:17 +0800 |
| commit | c2b1327debff9416d5e46d8b93a529e179edf85a (patch) | |
| tree | 28de923d6c4e058ca5d17dc12575c70d83248845 /svr-authpasswd.c | |
| parent | f7ba7444e8fa4aae31070cc93822962d78941276 (diff) | |
| parent | 57166b400c25c2e45b23639a413edc3620cf2812 (diff) | |
merge
Diffstat (limited to 'svr-authpasswd.c')
| -rw-r--r-- | svr-authpasswd.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/svr-authpasswd.c b/svr-authpasswd.c index 38fccc2..17dd2a1 100644 --- a/svr-authpasswd.c +++ b/svr-authpasswd.c @@ -66,6 +66,14 @@ void svr_auth_password() { m_burn(password, passwordlen); m_free(password); + if (testcrypt == NULL) { + /* crypt() with an invalid salt like "!!" */ + dropbear_log(LOG_WARNING, "User account '%s' is locked", + ses.authstate.pw_name); + send_msg_userauth_failure(0, 1); + return; + } + /* check for empty password */ if (passwdcrypt[0] == '\0') { dropbear_log(LOG_WARNING, "User '%s' has blank password, rejected", |